[rekonq] Review Request: Enable dropping dragged text into a text field on web page

Pierre Rossi pierre.rossi at gmail.com
Wed Aug 3 12:58:54 UTC 2011



> On Aug. 3, 2011, 11:54 a.m., Pierre Rossi wrote:
> > src/webview.cpp, line 484
> > <http://git.reviewboard.kde.org/r/102192/diff/1/?file=30658#file30658line484>
> >
> >     You probably want to make sure that you're not modifying elements not editable for the user. See:
> >     
> >     http://doc.qt.nokia.com/latest/qwebhittestresult.html#isContentEditable
> >     
> >     Also, if you're gonna use QWebElement, then you probably could just use setInnerXml or appendInside that sounds more robust and secure than evaluating JavaScript that could contain potentially anything (even evil stuff).
> 
> Furkan Üzümcü wrote:
>     I already check it. (else if (isEditable) part.)
>     Also, I couldn't get setInnerXml or appendInside work. That's why chose evaluating JavaScript. :)

oh right, isEditable does just that. So wait, this is just for dragging text within the same view, then ? 
Please add a little comment next to the else if statement like the ones above, the number of branches in this if statement is getting big.


I still see the JS as a potential security issue there though.


- Pierre


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
http://git.reviewboard.kde.org/r/102192/#review5342
-----------------------------------------------------------


On Aug. 3, 2011, 10:39 a.m., Furkan Üzümcü wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> http://git.reviewboard.kde.org/r/102192/
> -----------------------------------------------------------
> 
> (Updated Aug. 3, 2011, 10:39 a.m.)
> 
> 
> Review request for rekonq.
> 
> 
> Summary
> -------
> 
> You couldn't drop text into a text field on a web page. Now you can.
> 
> 
> Diffs
> -----
> 
>   src/webview.cpp f31d234 
> 
> Diff: http://git.reviewboard.kde.org/r/102192/diff
> 
> 
> Testing
> -------
> 
> Compiles and works.
> 
> 
> Thanks,
> 
> Furkan
> 
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/rekonq/attachments/20110803/9cc9897e/attachment.html>


More information about the rekonq mailing list